Privacy policy

Introduction

At Downton Home, we are deeply committed to safeguarding and respecting your privacy.

This Privacy Policy details how and why we gather personal information from individuals who visit our website, the ways in which we utilise that information, and the situations in which it may be disclosed to third parties.

Downton Home Furnishings Ltd is a company registered in England and Wales. Company number: 14979337 Registered office address: 124 City Road, London, United Kingdom, EC1V 2NX

By accessing and using our website, you consent to the collection and processing of information as outlined in this policy.

This policy should be read in conjunction with our Terms of Service and Cookie Policy, which contain additional information about how we operate and your rights as a user of our website.

Data Controller

For the purposes of data protection legislation, Downton Home Furnishings Ltd is the data controller responsible for your personal data.

If you have any questions about how we handle your data, or wish to exercise any of your rights, please contact us using the details at the end of this policy.

What Information We Collect

Personal data encompasses any information that can be utilised to identify you as an individual. We collect different types of personal data depending on how you interact with us.

Information You Provide to Us

This includes data you provide when you:

• Place an order - Name, billing address, delivery address, email address, telephone number, payment information
  
• Create an account - Username, password, order history, saved preferences
  
• Contact us - Name, email address, telephone number, details of your enquiry or complaint
  
• Subscribe to marketing - Email address, name, communication preferences
  
• Enter a competition - Name, email address, telephone number, postal address, any information required for entry
  
• Apply for employment - CV, cover letter, employment history, references, right to work documentation
  
• Leave a review - Name, email address, review content, star rating
  
• Use our design services - Property details, measurements, style preferences, budget information, photographs of your space

Information We Collect Automatically

When you visit our website, we automatically collect certain information about your device and browsing behaviour:

• Technical data - IP address, browser type and version, operating system, device type
  
• Usage data - Pages visited, time spent on pages, links clicked, date and time of visit, referring website
  
• Location data - Approximate geographic location based on IP address
  
• Cookie data - Information collected via cookies and similar technologies (see our Cookie Policy for full details)

Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors - Transaction confirmation and fraud prevention data
  
• Delivery partners - Delivery status and tracking information
  
• Marketing platforms - Engagement data for emails and advertisements
  
• Analytics providers - Website usage statistics and demographic information
  
• Social media platforms - If you interact with us via social media or use social login features
  
• Credit reference agencies - For fraud prevention purposes
  
• Publicly available sources - Companies House, Land Registry, or other public databases where lawful

We only use this information where we have checked that these third parties either have your consent or are otherwise legally permitted to disclose your personal data to us.

Legal Basis for Processing Your Data

Under data protection law, we must have a lawful basis for collecting and using your personal data. We rely on the following legal grounds:

Performance of a Contract

We process your personal data to fulfil our contractual obligations to you, including:

• Processing and delivering your orders
  
• Managing payments and refunds
  
• Providing customer service and support
  
• Sending order confirmations and delivery updates

Without this data, we cannot complete your order or provide our services.

Legitimate Interests

We may process your data where it is in our legitimate business interests to do so, provided this does not override your rights. This includes:

• Improving our website, products, and services
  
• Conducting market research and analysing customer trends
  
• Detecting and preventing fraud or criminal activity
  
• Protecting our business and enforcing our legal rights
  
• Managing our relationship with suppliers and partners
  
• Ensuring network and information security
  
• Administering and protecting our business operations

We always balance our interests against your rights and will not process your data in ways you would not reasonably expect.

Legal Obligation

We may process your data to comply with legal or regulatory requirements, including:

• Tax and accounting obligations
  
• Compliance with court orders or legal proceedings
  
• Responding to requests from law enforcement or regulatory authorities
  
• Meeting health and safety requirements
  
• Complying with consumer protection laws

Consent

Where required, we obtain your explicit consent before processing your data, particularly for:

• Sending marketing communications by email or SMS
  
• Using non-essential cookies on our website
  
• Processing sensitive personal data (if applicable)
  
• Transferring data outside the UK/EEA (where additional protections are needed)

You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Use Your Information

We process your personal data in a fair, lawful, and transparent manner.

We do not sell, rent, or trade your personal data to third parties under any circumstances.

Your information may be utilised for the following purposes:

Order Processing and Fulfilment

• Processing your orders and managing payments
  
• Arranging delivery and installation services
  
• Handling returns, refunds, and exchanges
  
• Maintaining records of transactions for accounting and legal purposes

Customer Service and Communication

• Responding to your enquiries, questions, and complaints
  
• Providing customer support via phone, email, or live chat
  
• Sending service messages about your account or orders
  
• Notifying you of changes to our services or policies
  
• Conducting customer satisfaction surveys

Marketing and Personalisation

• Sending promotional emails about products, offers, and events (with your consent)
  
• Sending SMS marketing messages (with your consent)
  
• Displaying relevant advertisements on third-party websites and social media
  
• Personalising your experience on our website based on your browsing history
  
• Recommending products we think you may be interested in
  
• Analysing customer preferences and purchasing behaviour

Website Improvement and Analytics

• Monitoring and analysing website usage and performance
  
• Identifying technical issues and improving website functionality
  
• Conducting A/B testing to optimise user experience
  
• Understanding which products and content are most popular
  
• Improving our search functionality and navigation

Fraud Prevention and Security

• Verifying your identity to prevent fraudulent transactions
  
• Detecting and investigating suspicious activity
  
• Protecting against cyber attacks and data breaches
  
• Ensuring the security of our systems and networks
  
• Complying with legal and regulatory requirements

Business Operations

• Managing our relationship with suppliers and service providers
  
• Conducting internal audits and quality assurance
  
• Training our staff to provide better service
  
• Resolving disputes and enforcing our terms and conditions
  
• Managing job applications and recruitment processes

Where necessary, we may analyse your data to gain a better understanding of your preferences and customise communications accordingly. This may include combining data we currently hold with information obtained from trusted external sources, where lawful to do so.

Sharing Your Information

We may disclose your personal data to trusted third-party service providers where necessary to deliver our services effectively. We only work with partners who demonstrate a strong commitment to data protection and security.

Service Providers We Work With

Payment Processors

• Shopify Payments
  
• PayPal
  
• Klarna
  
• Other payment gateways as offered at checkout

These providers process payment information securely and are PCI-DSS compliant.

Delivery and Logistics Partners

• DPD
  
• Royal Mail
  
• Specialist furniture delivery services
  
• Warehouse and fulfilment partners

We share delivery addresses and contact information to facilitate successful delivery.

Email and Marketing Platforms

• Klaviyo (email marketing)
  
• Mailchimp (email marketing)
  
• SMS marketing providers
  
• Social media advertising platforms (Meta, Google, Pinterest, TikTok)

We share email addresses and engagement data to send communications you have requested or consented to receive.

Website and Technology Providers

• Shopify (e-commerce platform and hosting)
  
• Google Analytics (website analytics)
  
• Google Tag Manager (tag management)
  
• Hotjar or similar (user behaviour analytics)
  
• Content delivery networks (CDN providers)
  
• Cloud storage providers

These services help us operate our website, analyse performance, and improve user experience.

Customer Service Tools

• Zendesk or similar (support ticketing)
  
• LiveChat or similar (live chat functionality)
  
• Trustpilot or similar (review platforms)
  
• Survey providers

These tools enable us to provide efficient customer support.

Fraud Prevention and Security

• Fraud detection services
  
• Credit reference agencies
  
• Identity verification providers

These services help protect both you and us from fraudulent activity.

How We Protect Your Data with Third Parties

We only disclose the minimum amount of data required for the service to be performed and ensure appropriate contractual safeguards are implemented through:

• Data processing agreements that comply with GDPR requirements
  
• Confidentiality obligations and security standards
  
• Restrictions on how data can be used and retained
  
• Regular audits and compliance checks
  
• Incident reporting and breach notification procedures

Other Circumstances for Disclosure

We will only disclose your personal data to third parties outside the service providers listed above if:

• You have provided explicit consent - For example, if you request we share information with a third party
  
• We are legally obligated to do so - Including responding to court orders, legal proceedings, or requests from law enforcement
  
• It is necessary to prevent fraud or criminal activity - Where we believe disclosure is necessary to protect our business, customers, or the public
  
• In connection with a business transaction - If we sell, merge, or transfer part of our business, your data may be transferred to the new owner (you would be notified)
  
• To enforce our rights - Where necessary to enforce our Terms of Service or protect our legal interests

We will never share your data for purposes other than those outlined in this policy without first obtaining your explicit consent.

International Data Transfers

All personal data collected through our website is primarily stored and processed within the United Kingdom and/or the European Economic Area (EEA).

However, some of our service providers may process data outside the UK/EEA, including in the United States. Where this occurs, we ensure appropriate safeguards are in place to protect your information, including:

• Adequacy decisions - Transferring data only to countries approved by the UK Government or EU Commission as providing adequate data protection
  
• Standard Contractual Clauses - Using legally approved contractual terms that provide equivalent protections to UK/EU law
  
• Additional security measures - Implementing technical and organisational measures to protect data in transit and at rest

If you would like more information about international transfers of your data, please contact us using the details at the end of this policy.

Data Retention

We routinely review the duration for which we retain personal data to ensure we only keep information for as long as necessary.

General Retention Principles

Your information will be retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

The criteria we use to determine retention periods include:

• The length of time we have an ongoing relationship with you
  
• Whether there is a legal or regulatory obligation to retain the data
  
• Whether retention is advisable in light of our legal position (such as statutes of limitations, litigation, or regulatory investigations)
  
• Whether the data is necessary for fraud prevention or security purposes

Specific Retention Periods

Order and transaction data - 7 years from the date of the transaction (to comply with tax and accounting obligations)

Marketing data - Until you unsubscribe or withdraw consent, after which your details are retained on a suppression list indefinitely to ensure we do not contact you again

Website analytics data - Typically 26-38 months, after which it is anonymised or deleted

CCTV footage (if applicable at our premises) - 30 days, unless required for an investigation

Job applications - 6-12 months after the recruitment process concludes, unless you consent to us keeping your details for future opportunities

Customer service records - 3-7 years depending on the nature of the enquiry

Account data - Until you request deletion or after 5 years of inactivity, whichever comes first

If you request deletion of your data (and we are not legally required to retain it), we will delete or anonymise it within 30 days of your request.

Marketing Communications

You maintain control over how we communicate with you regarding marketing and promotional offers.

How We Obtain Consent

We will only send marketing communications via email, SMS, or other electronic channels where you have provided your explicit consent by:

• Ticking an opt-in box when creating an account or placing an order
  
• Signing up to our newsletter via our website or a pop-up
  
• Entering a competition or promotion that includes marketing opt-in
  
• Requesting to receive marketing materials when contacting us

Soft Opt-In Exception

If you have purchased from us or made an enquiry about our products or services, we may send you marketing about similar products or services under the "soft opt-in" rule, unless you have opted out. This is a limited exception under UK law that allows businesses to market to existing customers.

What You Can Expect

If you have consented to receive marketing, we may send you:

• New product launches and collections
  
• Exclusive offers and discount codes
  
• Seasonal sales and promotions
  
• Interior design tips and inspiration
  
• Invitations to events or showroom visits
  
• Customer surveys and feedback requests

We typically send marketing emails no more than 2-3 times per week, though frequency may increase during peak promotional periods.

Managing Your Preferences

You can modify your marketing preferences or unsubscribe at any time by:

• Clicking the unsubscribe link included at the bottom of every marketing email
  
• Replying STOP to any SMS marketing message
  
• Contacting us directly at hello@downtonhome.com or 020 3051 9233
  
• Updating your account preferences if you have an online account with us

If you opt out of marketing communications:

• We will stop sending promotional messages within 48 hours (though you may receive messages already in transit)
  
• You will continue to receive service messages related to your orders or account
  
• Your details will be retained on a suppression list to ensure you do not receive further marketing
  
• You can opt back in at any time through your account settings or by contacting us

Please note that opting out of marketing communications does not affect any other processing of your data as described in this policy.

Your Rights Under Data Protection Law

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have important rights regarding your personal data.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."

What you'll receive:

• Confirmation of whether we are processing your data
  
• A copy of your personal data in a commonly used electronic format
  
• Information about how we use your data, who we share it with, and how long we retain it
  
• Details of your rights and how to exercise them

How to request: Email hello@downtonhome.com with "Subject Access Request" in the subject line. We may need to verify your identity before responding.

Response time: We will respond within one month of receiving your request. In complex cases, this may be extended by two further months, and we will notify you if this is necessary.

Cost: Subject access requests are normally free. However, if your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to respond.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

If you believe any information we hold is incorrect, please contact us at hello@downtonhome.com, and we will update our records without delay. We may need to verify the accuracy of the new data you provide.

Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, including where:

• The data is no longer necessary for the purposes for which it was collected
  
• You withdraw consent (where consent was the basis for processing)
  
• You object to processing and there are no overriding legitimate grounds
  
• The data has been unlawfully processed
  
• Erasure is required to comply with a legal obligation

Important limitations: We may not be able to delete your data if we need it to:

• Comply with legal or regulatory obligations (e.g., tax records)
  
• Establish, exercise, or defend legal claims
  
• Fulfil a contract with you

If we cannot delete your data, we will explain why and what alternatives are available (such as restricting processing).

Right to Restrict Processing

You have the right to request that we restrict how we use your data in certain situations, including where:

• You contest the accuracy of the data (restriction applies while we verify accuracy)
  
• The processing is unlawful, but you do not want the data deleted
  
• We no longer need the data, but you need it for legal claims
  
• You have objected to processing and we are verifying whether our legitimate grounds override yours

When processing is restricted, we can still store the data but cannot use it without your consent (except for legal claims or to protect others).

Right to Data Portability

You have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transmit this data to another organisation.

This right only applies where:

• Processing is based on consent or contract
  
• Processing is carried out by automated means

What's included: Data you have directly provided (such as account details, order history, preferences) rather than data we have generated about you (such as analytics or profiling).

How to request: Contact us at hello@downtonhome.com specifying the data you wish to receive and the format you prefer.

Right to Object

You have the right to object to processing of your personal data in certain circumstances:

Direct marketing: You can object at any time to us using your data for direct marketing purposes. We will stop processing your data for marketing immediately upon request.

Processing based on legitimate interests: You can object to processing carried out on the basis of legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Automated decision-making and profiling: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal effects or similarly significantly affect you, except where necessary for a contract or you have given explicit consent.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

How to withdraw:

• For marketing emails: Click the unsubscribe link or contact us
  
• For SMS marketing: Reply STOP or contact us
  
• For cookies: Adjust your browser settings or use our cookie management tool
  
• For other consent-based processing: Contact us directly

Effect of withdrawal: Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. However, we will stop processing your data for that purpose going forward.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details at the end of this policy.

What we may need from you: To protect your privacy and security, we may need to verify your identity before fulfilling your request. We may ask for:

• Proof of identity (e.g., passport, driving licence)
  
• Proof of address (if relevant)
  
• Additional information to help us locate your data

Response times: We aim to respond to all requests within one month. In complex cases, this may be extended by up to two further months, and we will notify you of any delay.

No fee (usually): There is usually no charge for exercising your rights. However, we may charge a reasonable fee or refuse requests that are manifestly unfounded, excessive, or repetitive.

Automated Decision-Making and Profiling

We may use automated processing and profiling to enhance your experience and improve our services, but we do not make decisions that produce legal effects or similarly significantly affect you based solely on automated processing.

How We Use Automated Processing

Fraud prevention: We use automated systems to detect potentially fraudulent transactions and protect both you and us from financial crime. This may include analysing payment details, order patterns, and device information.

Personalisation: We may analyse your browsing behaviour and purchase history to recommend products we think you will like and to show you relevant advertisements on our website and other platforms.

Email marketing optimisation: We may use automated tools to determine the best time to send you marketing emails or to personalise content based on your interests and engagement history.

Website analytics: We use automated tools (such as Google Analytics) to understand how visitors use our website and to identify areas for improvement.

Your Rights

Even where we use automated processing, you have the right to:

• Request human intervention
  
• Express your point of view
  
• Challenge any automated decision

If you have concerns about automated processing, please contact us at hello@downtonhome.com.

Children's Privacy

Our website and services are not intended for children under the age of 18.

We do not knowingly collect, store, or process personal data from anyone we know to be under 18 years of age. If you are under 18, please do not attempt to register for an account, place an order, or send us any personal information.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete that information as quickly as possible.

Parents and guardians: If you believe we have collected information from a child under 18, please contact us immediately at hello@downtonhome.com, and we will investigate and take appropriate action.

Exceptions

In limited circumstances, we may process data relating to individuals under 18 where:

• A parent or guardian has provided consent and is managing the transaction
  
• The individual is aged 16-17 and has capacity to provide their own consent under applicable law
  
• We are required to retain data for legal or contractual purposes (e.g., a delivery address)

In all cases, we will take extra care to protect the privacy of younger individuals.

Data Security

We take the security of your personal data very seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Technical Security Measures

• Encryption - We use SSL/TLS encryption to protect data transmitted between your browser and our servers
  
• Secure hosting - Our website is hosted on secure servers with industry-standard security protocols
  
• Access controls - We restrict access to personal data to employees and service providers who need it to perform their duties
  
• Password protection - All accounts are protected by passwords, and we encourage the use of strong, unique passwords
  
• Regular updates - We keep our systems and software up to date with the latest security patches
  
• Firewalls and monitoring - We use firewalls, intrusion detection, and monitoring tools to protect against cyber attacks

Organisational Security Measures

• Staff training - All employees receive data protection training and are required to maintain confidentiality
  
• Data minimisation - We only collect and retain data that is necessary for our purposes
  
• Regular audits - We conduct regular security audits and risk assessments
  
• Incident response - We have procedures in place to detect, report, and respond to data breaches
  
• Third-party due diligence - We carefully vet service providers to ensure they meet our security standards

Payment Security

We do not store complete payment card details on our systems. Payment information is processed by PCI-DSS compliant payment processors who specialise in secure payment handling.

When you make a payment, your card details are encrypted and transmitted directly to our payment processor. We only receive confirmation of the transaction and limited details for order fulfilment purposes.

Your Responsibilities

While we take every reasonable step to protect your data, security also depends on you:

• Keep your password secure - Do not share your account password with anyone
  
• Use strong passwords - Choose passwords that are difficult to guess and unique to our website
  
• Log out - Always log out of your account when using a shared or public device
  
• Report suspicious activity - Contact us immediately if you suspect unauthorised access to your account
  
• Keep software updated - Ensure your device and browser are up to date with security patches

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay (within 72 hours of becoming aware) and report the breach to the Information Commissioner's Office (ICO) as required by law.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve functionality, analyse usage, and enhance your browsing experience.

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website remember information about your visit, such as your preferences and login details.

Types of Cookies We Use

Essential cookies: These are necessary for the website to function and cannot be disabled. They include cookies that enable you to log in, add items to your basket, and complete purchases.

Performance cookies: These collect information about how visitors use our website, such as which pages are visited most often. This helps us improve website performance.

Functionality cookies: These allow the website to remember choices you make (such as your username or language preference) and provide enhanced, personalised features.

Marketing cookies: These track your browsing activity to deliver advertisements relevant to your interests. They may be set by us or by third-party advertising partners.

Managing Cookies

For full details about the cookies we use and how to manage your preferences, please see our Cookie Policy: https://www.downtonhome.com/policies/cookie-policy

You can also manage cookies through your browser settings. Please note that blocking certain cookies may impact your experience on our website and prevent some features from working correctly.

Links to Other Websites

Our website may contain links to third-party websites, including social media platforms, payment providers, review sites, and partner organisations.

This Privacy Policy applies exclusively to the Downton Home website. When you follow links to other websites, those sites will have their own privacy policies governing how they collect, use, and protect your data.

We are not responsible for the content, privacy practices, or security of third-party websites. We recommend reviewing the privacy policy of any website you visit before providing personal information.

Third-party content: Some pages on our website may include embedded content from third parties (such as YouTube videos, Google Maps, or social media widgets). These third parties may collect data about you, including through cookies, when you interact with their content. Please refer to their respective privacy policies for details.

Recruitment and Employment

If you apply for a position with Downton Home, we will collect and process personal data as part of our recruitment process.

Information We Collect

When you apply for a role, we may collect:

• CV and cover letter
  
• Application form responses
  
• Employment history and references
  
• Educational qualifications and certifications
  
• Right to work documentation
  
• Interview notes and assessments
  
• Background check results (if applicable)
  
• Diversity and equal opportunities data (optional and anonymous)

How We Use Recruitment Data

We use this information to:

• Assess your suitability for the role
  
• Verify your identity and eligibility to work in the UK
  
• Conduct background checks where appropriate
  
• Communicate with you throughout the recruitment process
  
• Comply with legal and regulatory requirements
  
• Maintain records for future opportunities (with your consent)

Legal Basis

We process recruitment data under the following legal bases:

• Legitimate interests - To assess candidates and make recruitment decisions
  
• Legal obligation - To verify right to work and comply with employment law
  
• Consent - To keep your details for future opportunities (you can withdraw this at any time)

Retention

If your application is unsuccessful, we will retain your data for 6-12 months in case other suitable positions become available. After this period, your data will be securely deleted unless you have consented to us keeping it for longer.

If you are offered and accept a position, your recruitment data will become part of your employment record.

Your Rights

As a job applicant, you have the same rights as outlined elsewhere in this policy, including the right to access, correct, delete, or restrict processing of your data.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, our operational practices, or the services we offer.

How we notify you: When we make significant changes, we will notify you by:

• Posting a notice on our website homepage
  
• Sending an email to registered customers (if appropriate)
  
• Updating the "Last updated" date at the top of this policy

Your continued use: By continuing to use our website after changes take effect, you accept the updated policy. If you do not agree with the changes, please stop using our website and contact us to close your account or delete your data.

We recommend reviewing this policy periodically to stay informed about how we protect your information.

Last updated: January 2026

Complaints and Concerns

We take your privacy seriously and are committed to handling your data responsibly. If you have any concerns about how we process your personal data, we want to hear from you.

Contact Us First

If you have concerns regarding how your personal data is being handled, please contact us first so we can attempt to resolve the issue promptly:

Email: hello@downtonhome.com Telephone: 020 3051 9233 Office Hours: Monday to Friday, 9am–5pm

When contacting us about a privacy concern, please provide:

• Your full name and contact details
  
• A clear description of your concern
  
• Any relevant reference numbers or order details
  
• Your preferred resolution

We will acknowledge your complaint within 48 hours and aim to provide a full response within 30 days. In complex cases, we may need additional time and will keep you informed of progress.

Escalation to the ICO

If you are not satisfied with our response, or if you believe we have not handled your data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office (ICO) Website: https://www.ico.org.uk Telephone: 0330 123 1113 Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

The ICO provides guidance on data protection rights and investigates complaints about how organisations handle personal data. You can submit a complaint online through their website.

Note: We would appreciate the opportunity to resolve your concern before you contact the ICO, but you have the right to approach them at any time.

How to Contact Us

If you have any questions about this Privacy Policy, how we process your personal data, or wish to exercise any of your rights, please contact us:

Downton Home Furnishings Ltd

Email: hello@downtonhome.com Telephone: 020 3051 9233 Office Hours: Monday to Friday, 9am–5pm

Postal Address: Downton Home Furnishings Ltd 124 City Road London United Kingdom EC1V 2NX

Company Number: 14979337 Registered in: England and Wales

When contacting us about your personal data, please provide sufficient information to allow us to identify you and locate your records. We may need to verify your identity before responding to protect your privacy and security.

Last Updated: January 2026

Downton Home Furnishings Ltd
Company Number: 14979337
Registered Office: 124 City Road, London, United Kingdom, EC1V 2NX

For our full Terms of Service, please visit: https://www.downtonhome.com/pages/terms-conditions

For our Returns Policy, please visit: https://www.downtonhome.com/pages/returns-information

For our Shipping Policy, please visit: https://www.downtonhome.com/pages/delivery-information

For our Cookie Policy, please visit: https://www.downtonhome.com/pages/cookie-policy

 

---

 

✅ COMPLETE COMPREHENSIVE PRIVACY POLICY WITH FULL ROWEN-LEVEL DEPTH INCLUDING:

• Legal basis for all processing (contract, legitimate interests, legal obligation, consent)
  
• Named third-party service providers (Shopify, Klaviyo, DPD, Google Analytics, etc.)
  
• International data transfer safeguards
  
• Detailed data retention schedules
  
• Comprehensive marketing communications section with soft opt-in
  
• Full explanation of all GDPR rights with practical examples
  
• Automated decision-making and profiling disclosure
  
• Children's privacy statement (under 18)
  
• Extensive data security measures
  
• Recruitment data processing
  
• Data breach notification procedures
  
• Cookie overview with link to full policy
  
• Third-party links and embedded content
  
• Response times and verification procedures

This is now solicitor-level, belt-and-braces comprehensive.